[or-akl]

What

Adds .github/dependabot.yml so Dependabot opens a PR for every available dependency bump in this repo.

• Ecosystems detected: github-actions, pip
• Schedule: weekly
• open-pull-requests-limit: 100 so no update is held back
• GitHub's default 3-day cooldown on newly published versions is kept as a supply-chain safeguard

Why

Org-wide rollout of automated dependency update PRs across akeylesslabs, so every repo gets the same visibility into pending updates.

Tuning

If this repo needs packages bumped together, add a groups: block; to pin something, add ignore:. Directories were detected from the repo tree, so drop any entry that points at a non-deployed sample.

🤖 Generated with Claude Code

Summary by CodeRabbit

• Chores
  • Added weekly automated update checks for GitHub Actions and Python packages.
  • Update checks run from the repository root, with up to 100 open update pull requests allowed for each ecosystem.

[coderabbitai]

Warning

Review limit reached

• Run on-demand review

_{This review includes 1 billable file and costs up to $0.25.}

• Ask an admin to make reviews automatic

Open in CodeRabbit

Reviews can continue after your included limit without a manual trigger. An admin must approve usage-based billing.

Or wait 11 minutes for your next included review.

Check out review usage here.

View limit details

Limit details: You’ve used all 5 included reviews currently available. Your 15 included PR review attempts over the past 7 days set your current allowance at 5 reviews per hour.

Learn how review limits work.

Review configuration:

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: Organization UI
• Review profile: CHILL
• Plan: Essentials
• Run ID: 00e7cd07-9dc6-4023-bef3-a81d76c57ab5

Commits

Reviewing files that changed from the base of the PR and between 1609272 and 0461ea3.

Files selected for processing: 1

• .github/dependabot.yml

No actionable comments were generated in the recent review.

Recent review info

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: Organization UI
• Review profile: CHILL
• Plan: Essentials
• Run ID: 0820b125-51f4-4237-81c9-3c7e5327edb2

Commits

Reviewing files that changed from the base of the PR and between cccf409 and 1609272.

Files selected for processing: 1

• .github/dependabot.yml

Included review availability: This review used your included allowance. 0 included reviews remain after this review. Your included PR review attempts over the past 7 days set your current allowance at 5 reviews per hour.

Walkthrough

The repository adds Dependabot version 2 configuration for weekly GitHub Actions and pip updates. Each ecosystem can have up to 100 open pull requests.

Changes: Dependency updates

Layer / File(s)	Summary
Configure Dependabot updates .github/dependabot.yml	Adds weekly update schedules for GitHub Actions and pip, with a limit of 100 open pull requests per ecosystem. Comments describe the default cooldown and AppSec management.

Priority: Low

Estimated code review effort: 1 (Trivial) | ~5 minutes

Change: Other

Merge Risk: Minimal · previous review 16092

The configuration adds the intended weekly dependency updates without an identified correctness or availability risk.

Pre-merge checks: 5

Check name	Status	Explanation
Description Check		Check skipped - CodeRabbit’s high-level summary is enabled.
Title check		The title clearly and concisely describes the main change: adding Dependabot version updates for the repository's package ecosystems.
Docstring Coverage		No eligible functions found in the changed files. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff with cyclomatic complexity of at least 2. Documentat…
Linked Issues check		Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check		Check skipped because no linked issues were found for this pull request.

Full details: Docstring Coverage

Explanation

No eligible functions found in the changed files. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff with cyclomatic complexity of at least 2. Documentation-only edits and deletions within surviving functions are included; unchanged diff context and fully deleted functions are excluded. Analyzed 0 functions across 0 files. (1 skipped: 1 unsupported.)

Finishing Touches

🧪 Generate unit tests (beta)

• Commit to this branch
• Create a new PR

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

_{A rabbit checks the weekly queue,
For Actions and pip, updates brew.
A hundred requests may hop along,
While quiet comments note the song.
One config keeps the cadence true.}

_{Comment @coderabbitai help to get the list of available commands.}